update routes and add users controller